This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ece9b40b-cd48-4054-972d-be4dd52242a3.cer
File:                     ece9b40b-cd48-4054-972d-be4dd52242a3.cer (raw, json)
Hash identifier:          0IeyCflxibSyBQGGaV89903gqGbtabhzsJzSq5aq9fM=
Subject key identifier:   E5:AB:6F:A1:5F:2F:FA:38:39:EA:9C:C0:D6:29:55:7D:C1:3A:FA:CD
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer:       /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial:       010D0C9F4328584BC867B4C3FD0B5DD4CA2E1C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ece9b40b-cd48-4054-972d-be4dd52242a3/ece9b40b-cd48-4054-972d-be4dd52242a3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ece9b40b-cd48-4054-972d-be4dd52242a3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 07 Nov 2025 17:18:19 +0000
Certificate not after:    Tue 26 Oct 2027 21:59:43 +0000
Subordinate resources:    AS: 11741
                          AS: 19410
                          IP: 216.7.32.0/23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c8:67:b4:c3:fd:0b:5d:d4:ca:2e:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
        Validity
            Not Before: Nov  7 17:18:19 2025 GMT
            Not After : Oct 26 21:59:43 2027 GMT
        Subject: CN=ece9b40b-cd48-4054-972d-be4dd52242a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:68:d3:c6:36:7c:6a:a7:1f:e5:51:c4:2e:a4:
                    10:c4:ad:2d:73:0e:e7:d1:cc:bf:82:b7:94:4a:80:
                    ee:ef:45:fe:2e:1d:17:d0:56:e1:27:87:fb:c4:be:
                    f7:d5:9f:28:95:e3:22:df:46:b9:e9:e4:1c:ba:a8:
                    6f:4b:ee:a0:fe:8f:13:4f:b3:a4:1d:7e:c8:38:e8:
                    9c:b4:f0:a4:a2:1d:ef:b8:15:67:c9:54:fc:97:e1:
                    82:ff:fa:a1:ac:d6:ee:a0:b8:15:1f:c0:86:c0:90:
                    47:38:7c:e4:b0:03:cc:64:6d:ee:b0:ca:1f:4c:27:
                    f0:fd:5f:43:be:4b:18:24:ff:0a:23:38:dd:3b:58:
                    85:11:2f:82:95:f9:f8:ed:6c:23:6c:01:12:8e:bf:
                    51:c1:e9:00:12:c3:02:51:b0:be:8d:9c:b3:a8:46:
                    b4:db:de:83:b9:c5:fd:82:7b:97:d9:bb:4d:b7:71:
                    90:bb:72:cb:80:30:6c:0c:f8:1f:bb:4e:c7:ee:4c:
                    02:64:31:5d:b1:1b:0d:52:8d:9e:d8:92:c5:78:a8:
                    5d:53:17:f9:45:61:2b:2e:b9:f1:5d:5f:4f:be:49:
                    53:c4:69:27:39:6d:67:ee:9c:3e:41:43:34:16:02:
                    36:ae:82:d2:6e:79:e4:24:bb:14:0e:9c:32:cb:d8:
                    67:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AB:6F:A1:5F:2F:FA:38:39:EA:9C:C0:D6:29:55:7D:C1:3A:FA:CD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ece9b40b-cd48-4054-972d-be4dd52242a3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ece9b40b-cd48-4054-972d-be4dd52242a3/ece9b40b-cd48-4054-972d-be4dd52242a3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl

            X509v3 Authority Key Identifier:
                keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.7.32.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11741
                  19410

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:3d:36:39:d1:d9:db:47:be:e2:36:d9:54:a1:71:11:9e:d8:
         6a:38:92:21:a9:c7:34:24:80:64:c2:e6:ee:61:dd:97:e8:e4:
         b0:75:61:4d:a3:da:da:e4:ec:65:a5:eb:f2:5c:58:5c:94:01:
         ce:69:5d:f8:ec:7a:15:fc:c7:60:b7:bc:20:4d:25:3e:21:07:
         29:eb:c1:55:a8:a7:4b:3b:8c:1e:18:94:75:58:61:32:7c:2d:
         36:4a:79:b0:a5:61:79:f8:a0:c4:47:71:15:86:8f:c5:66:ca:
         f2:af:8b:2f:b9:bb:43:98:08:73:f0:ae:f3:86:0e:fc:f2:cd:
         68:21:e1:9f:d1:de:9a:b0:67:68:8a:97:76:66:61:a5:d2:d2:
         5d:6a:f6:78:70:a1:0b:b4:74:ff:94:41:30:8c:62:c1:f1:6f:
         1e:19:58:21:86:ff:2b:ff:e8:c3:43:7f:f6:64:6d:0e:f9:e3:
         75:95:ae:b0:97:ab:9a:4a:93:9a:00:a1:50:64:d2:b4:ea:73:
         27:c5:0f:0c:a7:c2:b6:8c:65:b2:68:79:fd:c1:ee:75:c2:fd:
         6a:2d:3a:00:ed:43:11:6c:42:a8:01:d9:e8:29:fc:13:e2:bf:
         73:3a:a5:2f:8e:57:4d:90:9d:21:85:74:b2:47:c0:d8:59:fd:
         75:35:23:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:12:52 2025 by rpki-client